Connect with us

Tech

Another WD exploit surfaces, allows remote install of modified NAS firmware – MobileSyrup

Published

 on


Western Digital just can’t catch a break.

Yet another security flaw has surfaced for WD NAS (network-attached storage) owners. This time around, the flaw impacts My Cloud OS 3 devices. It allows malicious actors to access a device and install modified firmware capable of executing commands, bricking the device or worse.

Security researchers Pedro Ribeiro and Radek Domanski (via KrebsOnSecurity) detailed the vulnerability and remotely updating WD NAS devices with modified firmware in a video.

Genius Dog 336 x 280 - Animated

Typically, firmware updates are only accessible to authenticated users. However, the researchers found that the NAS seems to have a user on it with a blank password, which in some cases allowed the researchers to authenticate and install the modified firmware.

Worse, WD’s advice on the matter is basically to update to My Cloud OS 5 or buy a device with My Cloud OS 5. The company describes My Cloud OS 5 as a “major and fundamental security release” that revamps the architecture of My Cloud firmware and defends against “common classes of attacks.”

[embedded content]

Even if My Cloud OS 5 is as secure as WD claims, it’s not exactly an option for all users. For one, many have avoided updating to My Cloud OS 5 because it lacks several features and functions from My Cloud OS 3. For others, the My Cloud OS 5 update isn’t available for their device (you can find a full list of supported devices here). Others have encountered difficulties performing the upgrade, while some people just may not have the money or time to switch their WD NAS.

Unfortunately, WD has also made it clear it doesn’t plan to update My Cloud OS 3 with security patches, which leaves many NAS owners stuck.

Ultimately, it’s a messy situation. For those stuck with a MyCloud OS 3 device, either because they can’t update, won’t update or can’t upgrade, there’s basically one solution WD has offered: disable the remote dashboard access. WD gave the advice in a statement to Comparitech last year, along with a link to instructions for doing so.

If you can afford to upgrade to a new NAS, that may be the best course of action. Plus, it’d give you a chance to move away from WD, which has had a string of recent security issues related to its storage solutions.

Source: KrebsOnSecurity, Comparitech Via: The Verge

Adblock test (Why?)



Source link

Continue Reading

Tech

Armored Core VI Announced, Which Isn’t A Souls Game

Published

 on

 

ARMORED CORE VI FIRES OF RUBICON – Reveal Trailer

I have not played an Armored Core game in a very long time, and even then I was never the biggest fan. But this looks cool as hell. It’s coming in 2023 for Xbox One, Xbox Series X|S, PS4, PS5 and PC.

Here’s some official words:

Genius Dog 336 x 280 - Animated

ARMORED CORE VI FIRES OF RUBICON will offer a game experience based on the mech game know-how FromSoftware cultivated over 25 years of developing games in the series, but now introducing groundbreaking gameplay found in the developer’s recent action games. The new ARMORED CORE title will combine these elements into thrilling action that only mechas can provide. The game promises to be a unique entry in the mech action game genre.

In ARMORED CORE VI FIRES OF RUBICON, players will be able to freely move through massive three-dimensional environments with rapid maneuverability while experiencing visceral vehicular combat. Signature to FromSoftware’s carefully crafted game design, the game will feature challenging and memorable battles along with a fulfilling progression system and deep gameplay, all of it now powered by assembling mechs and going into combat with massive bosses. Players will recognize the sense of satisfaction and achievement when they overcome a difficult situation and relish momentary victory, and perhaps a boost to their standing, before encountering the next challenge.

Source link

Continue Reading

Tech

After Heated Battle, Genshin Impact Wins Player’s Voice at The 2022 Game Awards

Published

 on

Genshin Impact has won the Player’s Voice award at The Game Awards 2022, following an intense battle against Elden Ring and Sonic Frontiers.

Unlike other awards bestowed at The Game Awards, which are primarily determined by members of the press and other influential individuals in the industry, the Player’s Voice category is 100% fan-voted. Earlier this week, ahead o the show, the results projected that Genshin Impact would edge out both Sonic Frontiers and Elden Ring. Other nominees for the Player’s Voice category include God of War: Ragnarok and Stray.

Although Elden Ring, in particular, did not get selected, FromSoftware’s latest project did go home with a few awards, including Best Art Direction and Best Game Direction. For more on the winners from this year’s Game Awards, check out our roundup that features the nominees and winners of each category.

Taylor is the Associate Tech Editor at IGN. You can follow her on Twitter @TayNixster.

Genius Dog 336 x 280 - Animated

Source link

Continue Reading

Tech

Super Mario Bros. Movie "Mushroom Kingdom" Official Reveal

Published

 on

When he’s not paying off a loan to Tom Nook, Liam likes to report on the latest Nintendo news and admire his library of video games. His favourite Nintendo character used to be a guitar-playing dog, but nowadays he prefers to hang out with Judd the cat.

Source link

Continue Reading

Trending